Vulnerability-Lookup

RHSA-2026:80765

Vulnerability from csaf_redhat - Published: 2026-10-12 13:06 - Updated: 2026-10-12 14:16

Summary

Red Hat Security Advisory: goose security update

Severity

Important

Notes

Topic: An update for goose is now available for Red Hat Enterprise Linux 10.

Details: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Security Fix(es): * goose: Arbitrary command execution via malicious Git configuration in `goose review` (CVE-2026-72718) * goose: RMCP: Token impersonation via missing OAuth resource field validation (CVE-2026-63127) * goose: RMCP: Denial of Service via unauthenticated session table leak (CVE-2026-63128) * goose: rustls-webpki: Denial of Service via crafted Certificate Revocation List (CVE-2026-93599) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-63127

A flaw was found in rmcp, a Rust SDK for the Model Context Protocol. The OAuth implementation in rmcp omits the RFC 9728 resource field from ResourceServerMetadata. This allows a malicious Model Context Protocol (MCP) server to publish metadata for a different legitimate MCP resource. Consequently, a victim connecting to the malicious server may obtain a legitimate access token, which the client then sends to the malicious server. This enables the attacker to capture the token and impersonate the victim against the legitimate MCP resource within the token's granted scopes, leading to unauthorized access and information disclosure.

8.2 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

CWE-289 - Authentication Bypass by Alternate Name

Affected products

Fixed 13 products

Product	Version	Remediation
Unresolved product id: Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.src	—	Vendor Fix fix Workaround
Unresolved product id: Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2026-63128

A flaw was found in rmcp, a Rust SDK for the Model Context Protocol. An unauthenticated remote attacker can send specially crafted JSON-RPC POST requests to the stateful Streamable HTTP server. These requests cause the server to create and permanently retain session and channel state without proper validation. Repeated exploitation of this vulnerability can lead to unbounded growth of the session table, resource exhaustion, and ultimately a Denial of Service (DoS) for the server.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-772 - Missing Release of Resource after Effective Lifetime

Affected products

Fixed 13 products, the same list as for CVE-2026-63127

Threats

Impact Important

CVE-2026-72718

A flaw was found in goose, a general-purpose AI agent. The `goose review` command, which uses the system's Git executable, does not properly strip attacker-controlled Git configuration. A malicious Git repository can set the `core.fsmonitor` option in its configuration, causing Git to execute arbitrary commands on the host during an index refresh. This allows a local attacker to execute commands with the privileges of the user running goose, potentially leading to unauthorized file access, modification, or the exfiltration of sensitive environment secrets and API keys.

7.3 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected products

Fixed 13 products, the same list as for CVE-2026-63127

Threats

Impact Important

CVE-2026-93599

A flaw was found in rustls-webpki. A remote attacker, by influencing an application to parse a specially crafted Certificate Revocation List (CRL) that contains an empty `onlySomeReasons` value in its `issuingDistributionPoint` extension, could trigger a panic. This vulnerability leads to a denial of service (DoS) in applications that explicitly enable CRL revocation checking.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 13 products, the same list as for CVE-2026-63127

Threats

Impact Important

References

32 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:80765	self
https://access.redhat.com/security/updates/classi…	external
https://issues.redhat.com/browse/RHEL-254954	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-63127	self
https://bugzilla.redhat.com/show_bug.cgi?id=2535503	external
https://www.cve.org/CVERecord?id=CVE-2026-63127	external
https://nvd.nist.gov/vuln/detail/CVE-2026-63127	external
https://github.com/modelcontextprotocol/rust-sdk/…	external
https://github.com/modelcontextprotocol/rust-sdk/…	external
https://github.com/modelcontextprotocol/rust-sdk/…	external
https://github.com/modelcontextprotocol/rust-sdk/…	external
https://access.redhat.com/security/cve/CVE-2026-63128	self
https://bugzilla.redhat.com/show_bug.cgi?id=2535485	external
https://www.cve.org/CVERecord?id=CVE-2026-63128	external
https://nvd.nist.gov/vuln/detail/CVE-2026-63128	external
https://github.com/modelcontextprotocol/rust-sdk/…	external
https://github.com/modelcontextprotocol/rust-sdk/…	external
https://github.com/modelcontextprotocol/rust-sdk/…	external
https://access.redhat.com/security/cve/CVE-2026-72718	self
https://bugzilla.redhat.com/show_bug.cgi?id=2513538	external
https://www.cve.org/CVERecord?id=CVE-2026-72718	external
https://nvd.nist.gov/vuln/detail/CVE-2026-72718	external
https://github.com/aaif-goose/goose/commit/f8b5b7…	external
https://github.com/aaif-goose/goose/releases/tag/…	external
https://github.com/aaif-goose/goose/security/advi…	external
https://access.redhat.com/security/cve/CVE-2026-93599	self
https://bugzilla.redhat.com/show_bug.cgi?id=2538431	external
https://www.cve.org/CVERecord?id=CVE-2026-93599	external
https://nvd.nist.gov/vuln/detail/CVE-2026-93599	external
https://github.com/rustls/webpki/security/advisor…	external
https://www.vulncheck.com/advisories/rustls-webpk…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for goose is now available for Red Hat Enterprise Linux 10.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to: https://access.redhat.com/articles/11258\n\nSecurity Fix(es):\n\n* goose: Arbitrary command execution via malicious Git configuration\nin `goose review` (CVE-2026-72718)\n\n* goose: RMCP: Token impersonation via missing OAuth resource field\nvalidation (CVE-2026-63127)\n\n* goose: RMCP: Denial of Service via unauthenticated session table\nleak (CVE-2026-63128)\n\n* goose: rustls-webpki: Denial of Service via crafted Certificate\nRevocation List (CVE-2026-93599)\n\nFor more details about the security issue(s), including the impact,\na CVSS score, acknowledgments, and other related information, refer\nto the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:80765",
        "url": "https://access.redhat.com/errata/RHSA-2026:80765"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "RHEL-254954",
        "url": "https://issues.redhat.com/browse/RHEL-254954"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_80765.json"
      }
    ],
    "title": "Red Hat Security Advisory: goose security update",
    "tracking": {
      "current_release_date": "2026-10-12T14:16:39+00:00",
      "generator": {
        "date": "2026-10-12T14:16:39+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.2"
        }
      },
      "id": "RHSA-2026:80765",
      "initial_release_date": "2026-10-12T13:06:56+00:00",
      "revision_history": [
        {
          "date": "2026-10-12T13:06:56+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-10-12T13:06:56+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-10-12T14:16:39+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Extensions Channel (v. 10)",
                "product": {
                  "name": "Red Hat Enterprise Linux Extensions Channel (v. 10)",
                  "product_id": "Extensions-10.2.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:10.2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "goose-0:1.45.0-1.el10_2.src",
                "product": {
                  "name": "goose-0:1.45.0-1.el10_2.src",
                  "product_id": "goose-0:1.45.0-1.el10_2.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/goose@1.45.0-1.el10_2?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "goose-0:1.45.0-1.el10_2.aarch64",
                "product": {
                  "name": "goose-0:1.45.0-1.el10_2.aarch64",
                  "product_id": "goose-0:1.45.0-1.el10_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/goose@1.45.0-1.el10_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "goose-debugsource-0:1.45.0-1.el10_2.aarch64",
                "product": {
                  "name": "goose-debugsource-0:1.45.0-1.el10_2.aarch64",
                  "product_id": "goose-debugsource-0:1.45.0-1.el10_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/goose-debugsource@1.45.0-1.el10_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "goose-debuginfo-0:1.45.0-1.el10_2.aarch64",
                "product": {
                  "name": "goose-debuginfo-0:1.45.0-1.el10_2.aarch64",
                  "product_id": "goose-debuginfo-0:1.45.0-1.el10_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/goose-debuginfo@1.45.0-1.el10_2?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "goose-0:1.45.0-1.el10_2.ppc64le",
                "product": {
                  "name": "goose-0:1.45.0-1.el10_2.ppc64le",
                  "product_id": "goose-0:1.45.0-1.el10_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/goose@1.45.0-1.el10_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "goose-debugsource-0:1.45.0-1.el10_2.ppc64le",
                "product": {
                  "name": "goose-debugsource-0:1.45.0-1.el10_2.ppc64le",
                  "product_id": "goose-debugsource-0:1.45.0-1.el10_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/goose-debugsource@1.45.0-1.el10_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "goose-debuginfo-0:1.45.0-1.el10_2.ppc64le",
                "product": {
                  "name": "goose-debuginfo-0:1.45.0-1.el10_2.ppc64le",
                  "product_id": "goose-debuginfo-0:1.45.0-1.el10_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/goose-debuginfo@1.45.0-1.el10_2?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "goose-0:1.45.0-1.el10_2.s390x",
                "product": {
                  "name": "goose-0:1.45.0-1.el10_2.s390x",
                  "product_id": "goose-0:1.45.0-1.el10_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/goose@1.45.0-1.el10_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "goose-debugsource-0:1.45.0-1.el10_2.s390x",
                "product": {
                  "name": "goose-debugsource-0:1.45.0-1.el10_2.s390x",
                  "product_id": "goose-debugsource-0:1.45.0-1.el10_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/goose-debugsource@1.45.0-1.el10_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "goose-debuginfo-0:1.45.0-1.el10_2.s390x",
                "product": {
                  "name": "goose-debuginfo-0:1.45.0-1.el10_2.s390x",
                  "product_id": "goose-debuginfo-0:1.45.0-1.el10_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/goose-debuginfo@1.45.0-1.el10_2?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "goose-0:1.45.0-1.el10_2.x86_64",
                "product": {
                  "name": "goose-0:1.45.0-1.el10_2.x86_64",
                  "product_id": "goose-0:1.45.0-1.el10_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/goose@1.45.0-1.el10_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "goose-debugsource-0:1.45.0-1.el10_2.x86_64",
                "product": {
                  "name": "goose-debugsource-0:1.45.0-1.el10_2.x86_64",
                  "product_id": "goose-debugsource-0:1.45.0-1.el10_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/goose-debugsource@1.45.0-1.el10_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "goose-debuginfo-0:1.45.0-1.el10_2.x86_64",
                "product": {
                  "name": "goose-debuginfo-0:1.45.0-1.el10_2.x86_64",
                  "product_id": "goose-debuginfo-0:1.45.0-1.el10_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/goose-debuginfo@1.45.0-1.el10_2?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "goose-0:1.45.0-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux Extensions Channel (v. 10)",
          "product_id": "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.aarch64"
        },
        "product_reference": "goose-0:1.45.0-1.el10_2.aarch64",
        "relates_to_product_reference": "Extensions-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "goose-0:1.45.0-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux Extensions Channel (v. 10)",
          "product_id": "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.ppc64le"
        },
        "product_reference": "goose-0:1.45.0-1.el10_2.ppc64le",
        "relates_to_product_reference": "Extensions-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "goose-0:1.45.0-1.el10_2.s390x as a component of Red Hat Enterprise Linux Extensions Channel (v. 10)",
          "product_id": "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.s390x"
        },
        "product_reference": "goose-0:1.45.0-1.el10_2.s390x",
        "relates_to_product_reference": "Extensions-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "goose-0:1.45.0-1.el10_2.src as a component of Red Hat Enterprise Linux Extensions Channel (v. 10)",
          "product_id": "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.src"
        },
        "product_reference": "goose-0:1.45.0-1.el10_2.src",
        "relates_to_product_reference": "Extensions-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "goose-0:1.45.0-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux Extensions Channel (v. 10)",
          "product_id": "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.x86_64"
        },
        "product_reference": "goose-0:1.45.0-1.el10_2.x86_64",
        "relates_to_product_reference": "Extensions-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "goose-debuginfo-0:1.45.0-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux Extensions Channel (v. 10)",
          "product_id": "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.aarch64"
        },
        "product_reference": "goose-debuginfo-0:1.45.0-1.el10_2.aarch64",
        "relates_to_product_reference": "Extensions-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "goose-debuginfo-0:1.45.0-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux Extensions Channel (v. 10)",
          "product_id": "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.ppc64le"
        },
        "product_reference": "goose-debuginfo-0:1.45.0-1.el10_2.ppc64le",
        "relates_to_product_reference": "Extensions-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "goose-debuginfo-0:1.45.0-1.el10_2.s390x as a component of Red Hat Enterprise Linux Extensions Channel (v. 10)",
          "product_id": "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.s390x"
        },
        "product_reference": "goose-debuginfo-0:1.45.0-1.el10_2.s390x",
        "relates_to_product_reference": "Extensions-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "goose-debuginfo-0:1.45.0-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux Extensions Channel (v. 10)",
          "product_id": "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.x86_64"
        },
        "product_reference": "goose-debuginfo-0:1.45.0-1.el10_2.x86_64",
        "relates_to_product_reference": "Extensions-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "goose-debugsource-0:1.45.0-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux Extensions Channel (v. 10)",
          "product_id": "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.aarch64"
        },
        "product_reference": "goose-debugsource-0:1.45.0-1.el10_2.aarch64",
        "relates_to_product_reference": "Extensions-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "goose-debugsource-0:1.45.0-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux Extensions Channel (v. 10)",
          "product_id": "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.ppc64le"
        },
        "product_reference": "goose-debugsource-0:1.45.0-1.el10_2.ppc64le",
        "relates_to_product_reference": "Extensions-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "goose-debugsource-0:1.45.0-1.el10_2.s390x as a component of Red Hat Enterprise Linux Extensions Channel (v. 10)",
          "product_id": "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.s390x"
        },
        "product_reference": "goose-debugsource-0:1.45.0-1.el10_2.s390x",
        "relates_to_product_reference": "Extensions-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "goose-debugsource-0:1.45.0-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux Extensions Channel (v. 10)",
          "product_id": "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.x86_64"
        },
        "product_reference": "goose-debugsource-0:1.45.0-1.el10_2.x86_64",
        "relates_to_product_reference": "Extensions-10.2.Z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-63127",
      "cwe": {
        "id": "CWE-289",
        "name": "Authentication Bypass by Alternate Name"
      },
      "discovery_date": "2026-09-16T15:01:10.989628+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2535503"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in rmcp, a Rust SDK for the Model Context Protocol. The OAuth implementation in rmcp omits the RFC 9728 resource field from ResourceServerMetadata. This allows a malicious Model Context Protocol (MCP) server to publish metadata for a different legitimate MCP resource. Consequently, a victim connecting to the malicious server may obtain a legitimate access token, which the client then sends to the malicious server. This enables the attacker to capture the token and impersonate the victim against the legitimate MCP resource within the token\u0027s granted scopes, leading to unauthorized access and information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "rmcp: RMCP: Token impersonation via missing OAuth resource field validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw in the `rmcp` Rust SDK, which is utilized by the `goose` component in Red Hat products. The vulnerability allows a malicious Model Context Protocol (MCP) server to facilitate token impersonation by omitting a critical resource field during OAuth metadata discovery. This can lead to a client unknowingly sending a legitimate access token to the malicious server, resulting in unauthorized access and potential information disclosure within the token\u0027s granted scopes. Exploitation requires user interaction, but the attack complexity is low.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.aarch64",
          "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.ppc64le",
          "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.s390x",
          "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.src",
          "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.x86_64",
          "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.aarch64",
          "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.ppc64le",
          "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.s390x",
          "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.x86_64",
          "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.aarch64",
          "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.ppc64le",
          "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.s390x",
          "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-63127"
        },
        {
          "category": "external",
          "summary": "RHBZ#2535503",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2535503"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-63127",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-63127"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63127",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63127"
        },
        {
          "category": "external",
          "summary": "https://github.com/modelcontextprotocol/rust-sdk/commit/c1a8b29ff2cc45e7820b900dae42cbb4958089ec",
          "url": "https://github.com/modelcontextprotocol/rust-sdk/commit/c1a8b29ff2cc45e7820b900dae42cbb4958089ec"
        },
        {
          "category": "external",
          "summary": "https://github.com/modelcontextprotocol/rust-sdk/pull/937",
          "url": "https://github.com/modelcontextprotocol/rust-sdk/pull/937"
        },
        {
          "category": "external",
          "summary": "https://github.com/modelcontextprotocol/rust-sdk/releases/tag/rmcp-v2.0.0",
          "url": "https://github.com/modelcontextprotocol/rust-sdk/releases/tag/rmcp-v2.0.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/modelcontextprotocol/rust-sdk/security/advisories/GHSA-33f5-2c5q-wgwj",
          "url": "https://github.com/modelcontextprotocol/rust-sdk/security/advisories/GHSA-33f5-2c5q-wgwj"
        }
      ],
      "release_date": "2026-09-16T14:50:54.296000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-12T13:06:56+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.aarch64",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.ppc64le",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.s390x",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.src",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.x86_64",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.aarch64",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.ppc64le",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.s390x",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.x86_64",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.aarch64",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.ppc64le",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.s390x",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:80765"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.aarch64",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.ppc64le",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.s390x",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.src",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.x86_64",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.aarch64",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.ppc64le",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.s390x",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.x86_64",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.aarch64",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.ppc64le",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.s390x",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.aarch64",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.ppc64le",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.s390x",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.src",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.x86_64",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.aarch64",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.ppc64le",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.s390x",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.x86_64",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.aarch64",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.ppc64le",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.s390x",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "rmcp: RMCP: Token impersonation via missing OAuth resource field validation"
    },
    {
      "cve": "CVE-2026-63128",
      "cwe": {
        "id": "CWE-772",
        "name": "Missing Release of Resource after Effective Lifetime"
      },
      "discovery_date": "2026-09-16T14:51:23.439496+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2535485"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in rmcp, a Rust SDK for the Model Context Protocol. An unauthenticated remote attacker can send specially crafted JSON-RPC POST requests to the stateful Streamable HTTP server. These requests cause the server to create and permanently retain session and channel state without proper validation. Repeated exploitation of this vulnerability can lead to unbounded growth of the session table, resource exhaustion, and ultimately a Denial of Service (DoS) for the server.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "rmcp: RMCP: Denial of Service via unauthenticated session table leak",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: This flaw allows an unauthenticated remote attacker to cause a denial of service by exhausting server memory and resources. The `rmcp` Rust SDK, when used to implement a stateful Streamable HTTP server, is susceptible to resource exhaustion due to improper session management, which can impact legitimate client latency and terminate the server process.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.aarch64",
          "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.ppc64le",
          "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.s390x",
          "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.src",
          "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.x86_64",
          "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.aarch64",
          "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.ppc64le",
          "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.s390x",
          "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.x86_64",
          "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.aarch64",
          "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.ppc64le",
          "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.s390x",
          "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-63128"
        },
        {
          "category": "external",
          "summary": "RHBZ#2535485",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2535485"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-63128",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-63128"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63128",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63128"
        },
        {
          "category": "external",
          "summary": "https://github.com/modelcontextprotocol/rust-sdk/commit/dfa7fd6f9309deab60bea230b041be9a3fcda846",
          "url": "https://github.com/modelcontextprotocol/rust-sdk/commit/dfa7fd6f9309deab60bea230b041be9a3fcda846"
        },
        {
          "category": "external",
          "summary": "https://github.com/modelcontextprotocol/rust-sdk/pull/934",
          "url": "https://github.com/modelcontextprotocol/rust-sdk/pull/934"
        },
        {
          "category": "external",
          "summary": "https://github.com/modelcontextprotocol/rust-sdk/releases/tag/rmcp-v2.0.0",
          "url": "https://github.com/modelcontextprotocol/rust-sdk/releases/tag/rmcp-v2.0.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/modelcontextprotocol/rust-sdk/security/advisories/GHSA-9pj6-vhgr-3mwh",
          "url": "https://github.com/modelcontextprotocol/rust-sdk/security/advisories/GHSA-9pj6-vhgr-3mwh"
        }
      ],
      "release_date": "2026-09-16T14:49:04.401000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-12T13:06:56+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.aarch64",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.ppc64le",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.s390x",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.src",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.x86_64",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.aarch64",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.ppc64le",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.s390x",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.x86_64",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.aarch64",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.ppc64le",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.s390x",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:80765"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, restrict network access to the service utilizing the `rmcp` Streamable HTTP server to trusted clients only. Implement firewall rules to limit inbound connections to the specific port and IP addresses where the vulnerable service is exposed.",
          "product_ids": [
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.aarch64",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.ppc64le",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.s390x",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.src",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.x86_64",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.aarch64",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.ppc64le",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.s390x",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.x86_64",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.aarch64",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.ppc64le",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.s390x",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.aarch64",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.ppc64le",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.s390x",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.src",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.x86_64",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.aarch64",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.ppc64le",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.s390x",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.x86_64",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.aarch64",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.ppc64le",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.s390x",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "rmcp: RMCP: Denial of Service via unauthenticated session table leak"
    },
    {
      "cve": "CVE-2026-72718",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "discovery_date": "2026-08-10T15:50:59.860533+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2513538"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in goose, a general-purpose AI agent. The `goose review` command, which uses the system\u0027s Git executable, does not properly strip attacker-controlled Git configuration. A malicious Git repository can set the `core.fsmonitor` option in its configuration, causing Git to execute arbitrary commands on the host during an index refresh. This allows a local attacker to execute commands with the privileges of the user running goose, potentially leading to unauthorized file access, modification, or the exfiltration of sensitive environment secrets and API keys.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "goose: Goose: Arbitrary command execution via malicious Git configuration in `goose review`",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.aarch64",
          "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.ppc64le",
          "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.s390x",
          "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.src",
          "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.x86_64",
          "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.aarch64",
          "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.ppc64le",
          "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.s390x",
          "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.x86_64",
          "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.aarch64",
          "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.ppc64le",
          "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.s390x",
          "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-72718"
        },
        {
          "category": "external",
          "summary": "RHBZ#2513538",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2513538"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-72718",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-72718"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-72718",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72718"
        },
        {
          "category": "external",
          "summary": "https://github.com/aaif-goose/goose/commit/f8b5b7ba1fe6d006ccf6942f6b85a1bae985a2de",
          "url": "https://github.com/aaif-goose/goose/commit/f8b5b7ba1fe6d006ccf6942f6b85a1bae985a2de"
        },
        {
          "category": "external",
          "summary": "https://github.com/aaif-goose/goose/releases/tag/v1.44.0",
          "url": "https://github.com/aaif-goose/goose/releases/tag/v1.44.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/aaif-goose/goose/security/advisories/GHSA-r5pp-p5r8-466r",
          "url": "https://github.com/aaif-goose/goose/security/advisories/GHSA-r5pp-p5r8-466r"
        }
      ],
      "release_date": "2026-08-10T15:33:37.691000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-12T13:06:56+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.aarch64",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.ppc64le",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.s390x",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.src",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.x86_64",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.aarch64",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.ppc64le",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.s390x",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.x86_64",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.aarch64",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.ppc64le",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.s390x",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:80765"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.aarch64",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.ppc64le",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.s390x",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.src",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.x86_64",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.aarch64",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.ppc64le",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.s390x",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.x86_64",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.aarch64",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.ppc64le",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.s390x",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "goose: Goose: Arbitrary command execution via malicious Git configuration in `goose review`"
    },
    {
      "cve": "CVE-2026-93599",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-09-22T18:32:06.471964+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2538431"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in rustls-webpki. A remote attacker, by influencing an application to parse a specially crafted Certificate Revocation List (CRL) that contains an empty `onlySomeReasons` value in its `issuingDistributionPoint` extension, could trigger a panic. This vulnerability leads to a denial of service (DoS) in applications that explicitly enable CRL revocation checking.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "rustls-webpki: rustls-webpki: Denial of Service via crafted Certificate Revocation List",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.aarch64",
          "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.ppc64le",
          "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.s390x",
          "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.src",
          "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.x86_64",
          "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.aarch64",
          "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.ppc64le",
          "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.s390x",
          "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.x86_64",
          "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.aarch64",
          "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.ppc64le",
          "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.s390x",
          "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-93599"
        },
        {
          "category": "external",
          "summary": "RHBZ#2538431",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2538431"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-93599",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-93599"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93599",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93599"
        },
        {
          "category": "external",
          "summary": "https://github.com/rustls/webpki/security/advisories/GHSA-82j2-j2ch-gfr8",
          "url": "https://github.com/rustls/webpki/security/advisories/GHSA-82j2-j2ch-gfr8"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/rustls-webpki-before-0.103.13-panic-via-empty-bit-string",
          "url": "https://www.vulncheck.com/advisories/rustls-webpki-before-0.103.13-panic-via-empty-bit-string"
        }
      ],
      "release_date": "2026-09-18T13:20:10.258000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-12T13:06:56+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.aarch64",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.ppc64le",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.s390x",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.src",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.x86_64",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.aarch64",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.ppc64le",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.s390x",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.x86_64",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.aarch64",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.ppc64le",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.s390x",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:80765"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.aarch64",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.ppc64le",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.s390x",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.src",
            "Extensions-10.2.Z:goose-0:1.45.0-1.el10_2.x86_64",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.aarch64",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.ppc64le",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.s390x",
            "Extensions-10.2.Z:goose-debuginfo-0:1.45.0-1.el10_2.x86_64",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.aarch64",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.ppc64le",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.s390x",
            "Extensions-10.2.Z:goose-debugsource-0:1.45.0-1.el10_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "rustls-webpki: rustls-webpki: Denial of Service via crafted Certificate Revocation List"
    }
  ]
}

CVE-2026-63127 (GCVE-0-2026-63127)

Vulnerability from cvelistv5 – Published: 2026-09-16 14:50 – Updated: 2026-09-16 15:39

Title

RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery

Summary

RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.0.0, the rmcp crate's OAuth implementation in crates/rmcp/src/transport/auth.rs omits the RFC 9728 resource field from ResourceServerMetadata and allows discover_oauth_server_via_resource_metadata to use protected-resource metadata without confirming that the returned resource identifier exactly matches the configured MCP server. A malicious MCP server can publish metadata for a different legitimate MCP resource and its authorization server, causing a victim who connects and completes the authorization flow to obtain a legitimate access token that the client subsequently sends to the malicious server. The attacker can capture the token and impersonate the victim against the legitimate MCP resource within the token's granted scopes. This issue is fixed in version 2.0.0.

Severity

8.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-16 15:38 UTC

CWE

CWE-345 - Insufficient Verification of Data Authenticity

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7568 records in the last 180 days details

References

4 references

URL	Tags
https://github.com/modelcontextprotocol/rust-sdk/…	x_refsource_CONFIRM
https://github.com/modelcontextprotocol/rust-sdk/…	x_refsource_MISC
https://github.com/modelcontextprotocol/rust-sdk/…	x_refsource_MISC
https://github.com/modelcontextprotocol/rust-sdk/…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
modelcontextprotocol	rust-sdk	Affected: < 2.0.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-63127",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-16T15:38:50.771703Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-16T15:39:26.956Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/modelcontextprotocol/rust-sdk/security/advisories/GHSA-33f5-2c5q-wgwj"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "rust-sdk",
          "vendor": "modelcontextprotocol",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 2.0.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.0.0, the rmcp crate\u0027s OAuth implementation in crates/rmcp/src/transport/auth.rs omits the RFC 9728 resource field from ResourceServerMetadata and allows discover_oauth_server_via_resource_metadata to use protected-resource metadata without confirming that the returned resource identifier exactly matches the configured MCP server. A malicious MCP server can publish metadata for a different legitimate MCP resource and its authorization server, causing a victim who connects and completes the authorization flow to obtain a legitimate access token that the client subsequently sends to the malicious server. The attacker can capture the token and impersonate the victim against the legitimate MCP resource within the token\u0027s granted scopes. This issue is fixed in version 2.0.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-345",
              "description": "CWE-345: Insufficient Verification of Data Authenticity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-16T14:50:54.296Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/modelcontextprotocol/rust-sdk/security/advisories/GHSA-33f5-2c5q-wgwj",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/modelcontextprotocol/rust-sdk/security/advisories/GHSA-33f5-2c5q-wgwj"
        },
        {
          "name": "https://github.com/modelcontextprotocol/rust-sdk/pull/937",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/modelcontextprotocol/rust-sdk/pull/937"
        },
        {
          "name": "https://github.com/modelcontextprotocol/rust-sdk/commit/c1a8b29ff2cc45e7820b900dae42cbb4958089ec",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/modelcontextprotocol/rust-sdk/commit/c1a8b29ff2cc45e7820b900dae42cbb4958089ec"
        },
        {
          "name": "https://github.com/modelcontextprotocol/rust-sdk/releases/tag/rmcp-v2.0.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/modelcontextprotocol/rust-sdk/releases/tag/rmcp-v2.0.0"
        }
      ],
      "source": {
        "advisory": "GHSA-33f5-2c5q-wgwj",
        "discovery": "UNKNOWN"
      },
      "title": "RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-63127",
    "datePublished": "2026-09-16T14:50:54.296Z",
    "dateReserved": "2026-07-15T16:54:55.816Z",
    "dateUpdated": "2026-09-16T15:39:26.956Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-63128 (GCVE-0-2026-63128)

Vulnerability from cvelistv5 – Published: 2026-09-16 14:49 – Updated: 2026-09-16 15:18

Title

RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service

Summary

RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.0.0, the rmcp crate's stateful Streamable HTTP server in crates/rmcp/src/transport/streamable_http_server/tower.rs allows an unauthenticated client to send a well-formed JSON-RPC POST that is not an initialization request, or an initialization request with a mismatched protocol header, causing StreamableHttpService::handle_post to call LocalSessionManager.create_session before validating the message. An early validation failure returns without removing the inserted LocalSessionHandle from LocalSessionManager.sessions, permanently retaining session and channel state for the server process lifetime. Repeated requests can grow the shared session table without bound, degrade legitimate-client latency through lock contention, exhaust memory, and terminate the server. This issue is fixed in version 2.0.0.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-16 15:18 UTC

CWE

CWE-400 - Uncontrolled Resource Consumption
CWE-401 - Missing Release of Memory after Effective Lifetime
CWE-772 - Missing Release of Resource after Effective Lifetime

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7568 records in the last 180 days details

References

4 references

URL	Tags
https://github.com/modelcontextprotocol/rust-sdk/…	x_refsource_CONFIRM
https://github.com/modelcontextprotocol/rust-sdk/…	x_refsource_MISC
https://github.com/modelcontextprotocol/rust-sdk/…	x_refsource_MISC
https://github.com/modelcontextprotocol/rust-sdk/…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
modelcontextprotocol	rust-sdk	Affected: < 2.0.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-63128",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-16T15:18:04.578514Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-16T15:18:37.976Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/modelcontextprotocol/rust-sdk/security/advisories/GHSA-9pj6-vhgr-3mwh"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "rust-sdk",
          "vendor": "modelcontextprotocol",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 2.0.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.0.0, the rmcp crate\u0027s stateful Streamable HTTP server in crates/rmcp/src/transport/streamable_http_server/tower.rs allows an unauthenticated client to send a well-formed JSON-RPC POST that is not an initialization request, or an initialization request with a mismatched protocol header, causing StreamableHttpService::handle_post to call LocalSessionManager.create_session before validating the message. An early validation failure returns without removing the inserted LocalSessionHandle from LocalSessionManager.sessions, permanently retaining session and channel state for the server process lifetime. Repeated requests can grow the shared session table without bound, degrade legitimate-client latency through lock contention, exhaust memory, and terminate the server. This issue is fixed in version 2.0.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-401",
              "description": "CWE-401: Missing Release of Memory after Effective Lifetime",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-772",
              "description": "CWE-772: Missing Release of Resource after Effective Lifetime",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-16T14:49:04.401Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/modelcontextprotocol/rust-sdk/security/advisories/GHSA-9pj6-vhgr-3mwh",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/modelcontextprotocol/rust-sdk/security/advisories/GHSA-9pj6-vhgr-3mwh"
        },
        {
          "name": "https://github.com/modelcontextprotocol/rust-sdk/pull/934",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/modelcontextprotocol/rust-sdk/pull/934"
        },
        {
          "name": "https://github.com/modelcontextprotocol/rust-sdk/commit/dfa7fd6f9309deab60bea230b041be9a3fcda846",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/modelcontextprotocol/rust-sdk/commit/dfa7fd6f9309deab60bea230b041be9a3fcda846"
        },
        {
          "name": "https://github.com/modelcontextprotocol/rust-sdk/releases/tag/rmcp-v2.0.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/modelcontextprotocol/rust-sdk/releases/tag/rmcp-v2.0.0"
        }
      ],
      "source": {
        "advisory": "GHSA-9pj6-vhgr-3mwh",
        "discovery": "UNKNOWN"
      },
      "title": "RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-63128",
    "datePublished": "2026-09-16T14:49:04.401Z",
    "dateReserved": "2026-07-15T16:54:55.816Z",
    "dateUpdated": "2026-09-16T15:18:37.976Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-72718 (GCVE-0-2026-72718)

Vulnerability from cvelistv5 – Published: 2026-08-10 15:33 – Updated: 2026-08-10 17:00

Title

goose: Arbitrary command execution in goose CLI via `goose review` via git core.fsmonitor

Summary

goose is general-purpose AI agent that runs on your machine. Prior to 1.44.0, the `goose review` command runs the system `git` executable to gather the diff for review without stripping attacker-controlled Git configuration. A malicious repository whose `.git/config` sets [`core] fsmonitor = <command>` causes Git to execute that command on the host during the index refresh performed by `git diff HEAD`. The command runs before goose contacts a model and without a submitted prompt, model call, tool approval, or trust prompt. The context-gathering Git process is not sandboxed and is outside goose's tool-permission model. Arbitrary commands run with the privileges and environment of the user running goose, allowing file access or modification and exfiltration of environment secrets and provider API keys. The vulnerable Git invocations are built by git_command() in crates/goose-cli/src/commands/review/handler.rs and are used by touched_files() and collect_diff() for `git diff --name-only HEAD` and `git diff HEAD`. This issue is fixed in version 1.44.0.

Severity

7 (High)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-10 16:59 UTC

CWE

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7568 records in the last 180 days details

References

3 references

URL	Tags
https://github.com/aaif-goose/goose/security/advi…	x_refsource_CONFIRM
https://github.com/aaif-goose/goose/commit/f8b5b7…	x_refsource_MISC
https://github.com/aaif-goose/goose/releases/tag/…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
aaif-goose	goose	Affected: < 1.44.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-72718",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-10T16:59:40.746610Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-10T17:00:09.966Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/aaif-goose/goose/security/advisories/GHSA-r5pp-p5r8-466r"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "goose",
          "vendor": "aaif-goose",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.44.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "goose is general-purpose AI agent that runs on your machine. Prior to 1.44.0, the `goose review` command runs the system `git` executable to gather the diff for review without stripping attacker-controlled Git configuration. A malicious repository whose `.git/config` sets [`core] fsmonitor = \u003ccommand\u003e` causes Git to execute that command on the host during the index refresh performed by `git diff HEAD`. The command runs before goose contacts a model and without a submitted prompt, model call, tool approval, or trust prompt. The context-gathering Git process is not sandboxed and is outside goose\u0027s tool-permission model. Arbitrary commands run with the privileges and environment of the user running goose, allowing file access or modification and exfiltration of environment secrets and provider API keys. The vulnerable Git invocations are built by git_command() in crates/goose-cli/src/commands/review/handler.rs and are used by touched_files() and collect_diff() for `git diff --name-only HEAD` and `git diff HEAD`. This issue is fixed in version 1.44.0."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "ACTIVE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-94",
              "description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-10T15:33:37.691Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/aaif-goose/goose/security/advisories/GHSA-r5pp-p5r8-466r",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/aaif-goose/goose/security/advisories/GHSA-r5pp-p5r8-466r"
        },
        {
          "name": "https://github.com/aaif-goose/goose/commit/f8b5b7ba1fe6d006ccf6942f6b85a1bae985a2de",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/aaif-goose/goose/commit/f8b5b7ba1fe6d006ccf6942f6b85a1bae985a2de"
        },
        {
          "name": "https://github.com/aaif-goose/goose/releases/tag/v1.44.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/aaif-goose/goose/releases/tag/v1.44.0"
        }
      ],
      "source": {
        "advisory": "GHSA-r5pp-p5r8-466r",
        "discovery": "UNKNOWN"
      },
      "title": "goose: Arbitrary command execution in goose CLI via `goose review` via git core.fsmonitor"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-72718",
    "datePublished": "2026-08-10T15:33:37.691Z",
    "dateReserved": "2026-08-10T13:48:09.545Z",
    "dateUpdated": "2026-08-10T17:00:09.966Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-93599 (GCVE-0-2026-93599)

Vulnerability from cvelistv5 – Published: 2026-09-18 13:20 – Updated: 2026-09-18 14:15

Title

rustls-webpki before 0.103.13 Panic via empty BIT STRING

Summary

rustls-webpki through 0.103.12 (and 0.104.0-alpha releases before 0.104.0-alpha.7) contains a reachable panic in bit_string_flags() in src/der.rs. The input guard fails to reject a named-bit BIT STRING whose content is exactly [0x00] (zero padding bits and no data bytes), so raw_bits.len() - 1 underflows on the empty slice and the subsequent index operation panics (subtract-with-overflow in debug, index-out-of-bounds in release). The condition is reachable through the public API BorrowedCertRevocationList::from_der() when a CRL contains an issuingDistributionPoint extension with such an onlySomeReasons value. Exploitation requires an application that explicitly opts in to CRL revocation checking by passing RevocationOptions to verify_for_usage() and that parses CRL bytes obtained from a source the attacker can influence; the default rustls configuration, which does not use RevocationOptions, is unaffected. A crafted CRL causes a denial of service via the panic. Fixed in 0.103.13 and 0.104.0-alpha.7.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: poc Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-18 14:04 UTC

CWE

CWE-191 - Integer Underflow (Wrap or Wraparound)

Assigner

VulnCheck CNA under the mitre root

CNA scorecard B 84/100 over 5715 records in the last 180 days details

References

2 references

URL	Tags
https://github.com/rustls/webpki/security/advisor…	vendor-advisory
https://www.vulncheck.com/advisories/rustls-webpk…	third-party-advisory

Impacted products

1 product

Vendor	Product	Version
rustls	webpki	Affected: 0 , < 0.103.13 (semver) Affected: 0.104.0-alpha.1 , < 0.104.0-alpha.7 (semver)

Date Public

2026-04-21 00:00

Credits

tynus3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-93599",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-18T14:04:54.272751Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-18T14:15:25.188Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/rustls/webpki/security/advisories/GHSA-82j2-j2ch-gfr8"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:cargo/rustls-webpki",
          "product": "webpki",
          "vendor": "rustls",
          "versions": [
            {
              "lessThan": "0.103.13",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "0.104.0-alpha.7",
              "status": "affected",
              "version": "0.104.0-alpha.1",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "tynus3"
        }
      ],
      "datePublic": "2026-04-21T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "rustls-webpki through 0.103.12 (and 0.104.0-alpha releases before 0.104.0-alpha.7) contains a reachable panic in bit_string_flags() in src/der.rs. The input guard fails to reject a named-bit BIT STRING whose content is exactly [0x00] (zero padding bits and no data bytes), so raw_bits.len() - 1 underflows on the empty slice and the subsequent index operation panics (subtract-with-overflow in debug, index-out-of-bounds in release). The condition is reachable through the public API BorrowedCertRevocationList::from_der() when a CRL contains an issuingDistributionPoint extension with such an onlySomeReasons value. Exploitation requires an application that explicitly opts in to CRL revocation checking by passing RevocationOptions to verify_for_usage() and that parses CRL bytes obtained from a source the attacker can influence; the default rustls configuration, which does not use RevocationOptions, is unaffected. A crafted CRL causes a denial of service via the panic. Fixed in 0.103.13 and 0.104.0-alpha.7."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          },
          "format": "CVSS"
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-191",
              "description": "Integer Underflow (Wrap or Wraparound)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-18T13:20:10.258Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "GitHub Security Advisory (GHSA-82j2-j2ch-gfr8)",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/rustls/webpki/security/advisories/GHSA-82j2-j2ch-gfr8"
        },
        {
          "name": "VulnCheck Advisory: rustls-webpki before 0.103.13 Panic via empty BIT STRING",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/rustls-webpki-before-0.103.13-panic-via-empty-bit-string"
        }
      ],
      "title": "rustls-webpki before 0.103.13 Panic via empty BIT STRING",
      "x_generator": {
        "engine": "vulncheck-endgame"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-93599",
    "datePublished": "2026-09-18T13:20:10.258Z",
    "dateReserved": "2026-09-18T11:00:32.755Z",
    "dateUpdated": "2026-09-18T14:15:25.188Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:80765

CVE-2026-63127 (GCVE-0-2026-63127)

CVE-2026-63128 (GCVE-0-2026-63128)

CVE-2026-72718 (GCVE-0-2026-72718)

CVE-2026-93599 (GCVE-0-2026-93599)

Tags

Sightings

Nomenclature

Related by attack behaviour